Microsoft Browser Elevation of Privilege (MS16-118: CVE-2016-3388)

An Elevation of Privileges vulnerability exists in Internet Explorer and Edge. The vulnerability is due to a failure in properly securing a private namespace. A remote attacker could exploit this vulnerability by enticing a user to run a specially crafted executable...

PT-2016-2887

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 10 through 11 Microsoft Edge affected versions not specified Description The issue is related to errors in access restriction to private namespaces, which allows remote attackers to gain privileges via...

Microsoft Internet Explorer and Edge CVE-2016-3382 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currentl...

PT-2016-2886

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 10 through 11 Microsoft Edge affected versions not specified Description The issue is related to errors in access restriction to the namespace. Exploitation of this issue may allow a remote attacker to gain...

PT-2016-2890

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web site. This is caused by a buffer overflow in...

PT-2016-2891

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 10 through 11 Description The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code or cause a denial of service memory corruption via a specially crafted web site...

PT-2016-2901

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer and Microsoft Edge affected versions not specified Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web site. A remote code...

PT-2016-2903

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Microsoft Edge affected versions not specified Description The issue allows an attacker to determine the existence of unspecified files via a crafted web site. An information disclosure...

PT-2016-2884

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 11 affected versions not specified Microsoft Edge affected versions not specified Description The issue is related to the scripting engines in Microsoft browsers, allowing remote attackers to execute arbitrary code ...

PT-2016-2892

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Microsoft Edge affected versions not specified Description The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code or cause a denial of service...

PT-2016-2883

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 10 through 11 Microsoft Edge affected versions not specified Description The issue is related to the lack of protection for sensitive data in Microsoft browsers, allowing a remote attacker to potentially...

KLA10885 Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer and Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handlin...

KLA10881 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10879. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

October 11, 2016 — KB3192440 (OS Build 10240.17146)

None None...

Microsoft Internet Explorer Memory Corruption (MS16-118: CVE-2016-3385)

A remote code execution vulnerability exists in Internet Explorer and Microsoft Edge. The vulnerability is due to the way scripting engine renders when handling objects in memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...

Microsoft Internet Explorer CVE-2016-3298 Multiple Information Disclosure Vulnerabilities

Description Microsoft Internet Explorer is prone to multiple information-disclosure vulnerabilities. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet explorer 9, 10, and 11 are vulnerable. Technologies Affected Microsoft Internet...

Microsoft Internet Explorer s_DestroyMetaCallback Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

Microsoft Internet Explorer and Edge CVE-2016-3391 Information Disclosure Vulnerability

Description Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Edge and Internet explorer 9, 10, and 11 are vulnerable. Technologies Affected Microsoft...

Microsoft Internet Explorer Table Layout Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

HTA Web Server

This module hosts an HTML Application HTA that when opened will run a payload via Powershell. When a user navigates to the HTA file they will be prompted by IE twice before the payload is executed. Module Options msf use exploit/windows/misc/hta/server msf undefinedserver show actions ...actions...